Least priveilge for middle tier application services and DB

Question

Dear All,

                I have installed SharePoint server 2010 in my server (windows 2008 R2), on that time I have provided an administration privilege to that installation account (AD Account) (identity account).

                The same account I have used in multiple areas like Central admin, Web front End, DB installation, SMTP configuration etc.

                I have seen the account is referring in multiple services and app pools are run in this same account.

                Now I need to change the privilege from administration to least.

          I don’t have any idea about the impact.

          And how to do the following activities/ analyzer

1. What are all the areas it will impact
2. How to change the privilege
3. What is the procedure (which one is a first ,which one is a second activity)
4. What are all the steps need to follow
5. Where ever need to change that details
6. Is it possible to change the password for this account?
7. Account swapping is possible?
8. It is possible to changes from this account to any other new least privilege account.

Kindly help me for these activities are successfully complete.

Thanks in advance. J

Santhosh

Answer 1

Hi,

From your narration, I suggest you plan them from the begin instead of changing them in the middle. Because changing service accounts has impacts on your farm.

For more information about installing SharePoint 2010 using Least Privilege Service Accounts, check out the following articles:

http://technet.microsoft.com/en-us/library/ee662513.aspx

http://sharepointgeorge.com/2010/installing-sharepoint-2010-privilege-service-accounts/

http://en.hugon.ws/articles/sharepoint-2010/using-the-service-accounts-with-least-privilege-to-run-sharepoint-2010/

Thanks,

Rock Wang

---

Rock Wang TechNet Community Support

Answer 2

Also check out: http://social.technet.microsoft.com/wiki/contents/articles/8666.sharepoint-2010-best-practices-en-us.aspx

---

Kind regards,
Margriet Bruggeman

Lois & Clark IT Services
web site: http://www.loisandclark.eu
blog: http://www.sharepointdragons.com